• Allows RDP/SSH connectivity to your virtual machines directly over TLS from portal or from clients on our machines
• Can access Azure VM using their Azure Private IP Address so no need to assign Public IP Address
• No need to manage NSG each time we add a VM

SKUs

• Developer
  • No access to peered VNets
  • Connect linux vm with SSH
  • connect windows VM with RDP
• Basic
  • Connect linux vm with SSH
  • connect windows VM with RDP
• Standard
  • In addition to above, connect Linux VM with RDP and Windows VM with SSH
• Premium

Subnet Requirements

• need to create a subnet in vnet with name ‘AzureBastionSubnet’
• Subnet size must be /26 or larger (/24,/25, etc)

references:

Overview